Tag Info

New answers tagged


If the thieves man-in-the-middle connections to saas.example.com and present the wildcard cert, would the customer getting man-in-the-middled get any sort of SSL-related warning from their browser? Usually not because the attacker presents a non-revoked certificate which is valid for the accessed host. The client would only reject the valid certificate ...

Top 50 recent answers are included